From 475c007da0232769d26363545b0557c3056ebffa Mon Sep 17 00:00:00 2001
From: jakobrs <jakobrs100@gmail.com>
Date: Fri, 7 Aug 2020 17:47:27 +0200
Subject: [PATCH] nixos/libvirtd: add assertion requiring polkit to be enabled

---
 nixos/modules/virtualisation/libvirtd.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/nixos/modules/virtualisation/libvirtd.nix b/nixos/modules/virtualisation/libvirtd.nix
index 61ebc3ab8cf..f45f1802d91 100644
--- a/nixos/modules/virtualisation/libvirtd.nix
+++ b/nixos/modules/virtualisation/libvirtd.nix
@@ -155,6 +155,13 @@ in {
 
   config = mkIf cfg.enable {
 
+    assertions = [
+      {
+        assertion = config.security.polkit.enable;
+        message = "The libvirtd module currently requires Polkit to be enabled ('security.polkit.enable = true').";
+      }
+    ];
+
     environment = {
       # this file is expected in /etc/qemu and not sysconfdir (/var/lib)
       etc."qemu/bridge.conf".text = lib.concatMapStringsSep "\n" (e: